Setup HTTPS Certs with ACME¶
I use Cloudflare as my external DNS provider and will be using this for my challenge, if you don't use cloudlfare adjust accordingly.
this gist is part of this series
Create Account¶
- navigate to
Datcenter > ACME - under accounts click
add - the account name is anything useful to you - i recommend using something like \
-\ -acme where mydomain is your DNS domain prefix and tld is the suffice (like com or net etc) so mydomain-com-acme - enter your email
- accept the TOS and click
register
Create Challenge Plugin¶
- under 'challenge plugins' click
add - set any name for the plugin ID, i chose to call mine CF-\
-\ (e.g CF-mydomain-com - select DNS API = Cloudflare Managed DNS
- fill in CF_Key=
- Fill in CF_Token=
- click
ok
Get Certificates¶
- navigate to
Datacenter > pve1 > System > Certificates - click
add - Challenge type = DNS
- Plugin = CF-mydomain-com (or whatver you called it)
- create domain
pve1.mydomain.com - click
create - in the ACME section click
editnext 'Using Account' - select the account you created (e.g. mydomain-com-acme)
- click
apply - now click
order certificatesto get a letsencrypt certificate.
At this point it will create the DNS challenger, order the cert and then restart the web interface and if you did evertying right you mop jabe a cert. repeat the steps on pve2 and pve3 remebering to set the name correctly